General
- Target 2026-08-01_272b00c98c0cee0f1772ee446452ec12_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.8MB
- Sample260802-bgtsya1tdv
- SHA256 137142c60522da4e2c9e22b9c6e1699f5e48dda875eca36f802c19408b2f719d
- MD5 272b00c98c0cee0f1772ee446452ec12
- SHA1 cce72062d9f71f512f69b7756877c14f1b6636d8
- SHA512 bc1671a7df41eef24020a1cef648e6662d68dabd8a4ccfd3b028e33389b87b66d09ac8c097910622ab3ac0d21c3cf0c8fc6cf5c5a82d6e74f8b4b7a8f095ae51
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8USnUm8UuezSC6v2XMHG/h1+re5x6c1QVh:l8Vb618U68Vb618US18U9L/h1+E8VbN
- TLSH T119A68C17F6A881F5D07AD47486A69676EA327C420B309BCB4394F71C2E336D09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_272b00c98c0cee0f1772ee446452ec12_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_272b00c98c0cee0f1772ee446452ec12_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_272b00c98c0cee0f1772ee446452ec12_amadey_cobalt-strike_elex_emotet_glassworm_hijackloader_icedid_njrat_remcos_vidar_wannacry
- Size 9.8MB
- SHA256 137142c60522da4e2c9e22b9c6e1699f5e48dda875eca36f802c19408b2f719d
- MD5 272b00c98c0cee0f1772ee446452ec12
- SHA1 cce72062d9f71f512f69b7756877c14f1b6636d8
- SHA512 bc1671a7df41eef24020a1cef648e6662d68dabd8a4ccfd3b028e33389b87b66d09ac8c097910622ab3ac0d21c3cf0c8fc6cf5c5a82d6e74f8b4b7a8f095ae51
- SSDEEP 98304:+e5x6c1QVb6nUm8Ule5x6c1QVb6nUm8USnUm8UuezSC6v2XMHG/h1+re5x6c1QVh:l8Vb618U68Vb618US18U9L/h1+E8VbN
- TLSH T119A68C17F6A881F5D07AD47486A69676EA327C420B309BCB4394F71C2E336D09F3A725
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Adds Run key to start application
-
Sets desktop wallpaper using registry